Linux – Why is ACL not working correctly with this setup

access-control-listfileslinux

I am running Arch Linux on my laptop as a development machine, and I need to grant the users group RW privileges to the folder: /srv/http and all files and folders under it.

I made sure that ACL is installed, and then added it to my fstab:

/dev/sda7               /               ext4            rw,relatime,data=ordered,acl    0 1

Then I ran the following:

sudo setfacl -m group:users:rw- -R /srv/http

It works fine on my desktop machine, why wouldn't this work the same on my laptop? After using the setfacl command above the users do not even have read access to the files or folders any more.

When I remove the ACL records like this:

sudo setfacl -bR /srv/http

After that command the users can open the files, but not modify them.

Am I doing something wrong here?

Here is the output of "ls -l /srv/http"

[shane@arch-mobile ~]$ ls -l /srv/http/
total 4
drwxr-xr-x 9 http http 4096 Aug  7 11:04 drupal7

Output of "zcat /proc/config.gz | grep -i acl":

CONFIG_EXT4_FS_POSIX_ACL=y
CONFIG_REISERFS_FS_POSIX_ACL=y
CONFIG_JFS_POSIX_ACL=y
CONFIG_XFS_POSIX_ACL=y
CONFIG_BTRFS_FS_POSIX_ACL=y
CONFIG_FS_POSIX_ACL=y
CONFIG_GENERIC_ACL=y
CONFIG_TMPFS_POSIX_ACL=y
CONFIG_NFS_V3_ACL=y
CONFIG_NFSD_V2_ACL=y
CONFIG_NFSD_V3_ACL=y
CONFIG_NFS_ACL_SUPPORT=m
CONFIG_CIFS_ACL=y
CONFIG_9P_FS_POSIX_ACL=y

Best Answer

You should give "users" permission to search directories, otherwise it wont work:

 sudo find /srv/http -type d -exec setfacl -m group:users:rwx {} \;